Skip to content
OpenAdvisories

Vendor

Awesome Support

17 known vulnerabilities.

Products

Awesome Support – WordPress HelpDesk & Support Plugin 9 Awesome Support 7 Awesome Support (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-96820

    WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in Awesome Support <= 6.3.9 versions.

    Awesome Support Awesome Support
  • High 7.2
    CVE-2025-58662

    WordPress Awesome Support plugin <= 6.3.5 - Deserialization of untrusted data vulnerability

    Deserialization of Untrusted Data vulnerability in awesomesupport Awesome Support awesome-support allows Object Injection.This issue affects Awesome Support: from n/a through <= 6.3.5.

    Awesome Support Awesome Support
  • High 7.5
    CVE-2024-13567

    Awesome Support – WordPress HelpDesk & Support Plugin <= 6.3.1 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

    The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.3.1 via the 'awesome-support' directory. This makes it possible for unauthenticated attacker…

    Awesome Support Awesome Support – WordPress HelpDesk & Support Plugin Web / CMS
  • High 8.8
    CVE-2024-0594

    Awesome Support – WordPress HelpDesk & Support Plugin <= 6.1.7 - Authenticated (Subscriber+) SQL Injection

    The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injection via the 'q' parameter of the wpas_get_users action in all versions up to, and including, 6.1.7 due to insufficient escaping on the user s…

    Awesome Support Awesome Support – WordPress HelpDesk & Support Plugin Web / CMS